Netscape NETSCAPE DIRECTORY SERVER 6.1 - ADMINISTRATOR, Руководство администратора

Страница: 172 / 578

Using Roles
172 Netscape Directory Server Administrator’s Guide • August 2002
2.
Browse the navigation tree in the left pane to locate the base DN for your role.
Roles appear in the right pane with other entries.
3.
Select the role. Select Activate from the Object menu.
You can also right-click the role and select Activate from the menu.
The role is reactivated.
To see inactivated entries, select Inactivation State from the View menu.The
role icon appears as normal, indicating that the role is active.
Deleting a Role
Deleting a role deletes the role only, not its members.
To delete a role:
1.
In the Directory Server Console, select the Directory tab.
2.
Browse the navigation tree in the left pane to locate the base DN for your role.
Roles appear in the right pane with other entries.
3.
Right-click the role and select Delete.
A dialog box appears asking you to confirm the deletion. Click Yes.
4.
The Deleted Entries dialog box appears to inform you that the role was
successfully deleted. Click OK.
Managing Roles Using the Command Line
Roles inherit from the
ldapsubentry
object class, which is defined in the ISO/IEC
X.509 standard. In addition, each type of role has two specific object classes that
inherits from the
nsRoleDefinition
object class. Once you create a role, you
assign members to it as follows:
• Members of a managed role have the
nsRoleDN
attribute in their entry.
NOTE Deleting a role deletes the role entry but does not delete the
nsRoleDN
attribute for each role member. If you want to delete the
nsRoleDN
attribute for each role member, enable the Referential
Integrity Plug-in and configure it to manage the nsRoleDN attribute.
For more information on the Referential Integrity Plug-in see ,
“Maintaining Referential Integrity” on page 72.